Red Hat Security AdvisoryRHSA-2024:2816
Errata Advisory for Red Hat OpenShift GitOps v1.12.2 security update
Released 2024-05-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.12 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8 +6
Fixes 2 records
Priority HIGH 66
Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01226 · Published 2024-03-21 · Partial fix · 7.1.0, 6.1.2 +1 CWE-22
Priority LOW 28
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2024-04-15 · Partial fix · 2.10.7, 2.9.12 +1 CWE-863
